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DEVICE DELIVERING A SERVICE USING AN ASSOCIATED PORTABLE MEMORY, AND RELAYING 
MEANS FOR ALLOWING ACTIVATION OF AN APPLICATION OF THE PORTABLE MEMORY OF THE 
FIRST DEVICE BY A SECOND DEVICE 



5 1 Technical application field 

The Invention relates to a first device for delivering a service using an 
application lodged in a portable object, comprising a portable object reader for 
receiving said portable object, the portable object incorporating at least one 
application and the first device including resources for activating said 
10 application. The general problem to be solved is to allow, beside usual activation 
of an application of the portable object by the resident resources of the first 
device, activation of an application of the portable object by a second device, 
Independently of said resident resources. 



15 This feature offers several advantages, in particular : 

-in case the resources of the first device are regarded as too limited for certain 
management operations of the application (for example, the keyboard and 
display are small), activation by the second device may offer extended 
resources ; 

20 -for executing certain operations of the application, it may be desired or even 
required that only said second device will manage said operations. For example, 
it may be decided that some secure operations such as a funds transfer with the 
portable object will be only possible if executed by said second device. 
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The wording "portable object" includes any object able to lodge an application, 
such as a memory card or a microcontroller card (smart card). 

The present invention will be explained based on the following drawings : 

5 Figure 1 illustrates the known USB bus topology ; 

Figure 2 illustrates a smart card based WEB server application ; 

Figure 3 illustrates the invention, the first device being constituted by a HUB 
cellular handset; 

Figure 4 illustrates the invention applied to a secure off-line banking accounts 
10 browsing architecture. 

2 State of the art 

Since a preferred embodiment of the invention uses the USB technology, a short 
reminder of the latter is now made. 

15 2a1 IsBtcf^daaottoB^ to tB^@ llSiS teota^Bc^^ 

The USB technology is defined by a standard described in the "Universal Serial 
Bus specification" Details can be found in this document accessible on Internet 
site www.usb.ora . The USB physical interconnect is a tiered start made of three 
types of devices : 

20 1. The USB root that is hold by a host device such as a PC (Personal 
Computer). 

2. The USB HUB (interconnect). There is at least one HUB in a USB that is 
the root HUB. There may be up to five levels of HUB on the same bus. 

3. The USB functions that are always connected to a HUB. It may be a 
25 scanner, a printer, a joystick. . . 
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Figure 1 describes the USB topology. Objects named Tunc" are the USB 
functions (printer, scanner...): 

2.2 Compound device 

5 A compound device is a unique physical device that combines one or more 
functions with a HUB In a single paclcage. There might be a single chip, or a 
more complicated electronic device combining several electronic components. 

2.3 Virtual device and real device 

In the USB standard, a real device (i.e. a scanner, a printer...) Is always coupled 
10 with a virtual device that is the device driver allowing the computer application to 
access to the real device functions. 

In case of a compound device, it is associated with a least 2 virtual devices (1 
for the HUB and 1 per function). 

2.4 Example of an application using a WEB server embedded in a 

15 smart card 

In figure 2, secure areas are surrounded with a dashed rectangle. This ensures 
the user data are held in secure places. 

it worlcs as follows : 

• Regularly, and preferably when the network is underused, the smart card 
20 and the banic server synchronize the user data. The bank transfers both 

the data to display in an XML file and the pages format in an HTML file. 
Locally, the smart card WEB server is able to prepare the HTML pages 
including the data in order to answer to the handset browser queries with 
a ready to use HTML page. 
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• When the uiser wants to browse its account, it can require the handset 
browser to query the smart card WEB server instead of accessing to the 
bank server. 

2.5 The improvement proposed 

5 The application presented chapter 2.4 is interesting, but the user interface is 
limited by the handset keyboard and display. 

The goal of the present invention in this context is to allow the user to browse 
the smart card content from its PC, without having to remove the card from the 
handset. 

10 One should not think the invention is limited to the WEB server. It also applies to 
all the data and applications embedded in the smart card. Furthermore, the 
invention is applicable, not only to smart cards, but also to any combination 
where a removable device is coupled to another device that may be in relation 
with a 3"^ device itself compatible with the removable device mentioned here 

15 above. 

For achieving this goal, the invention concerns a first device for delivering a 
service using an application lodged in a portable object, comprising a portable 

20 object reader for receiving said portable object, the portable object incorporating 
at least one application and the first device including resources for activating 
said application, characterized in that it includes relay means arranged for 
performing a communication between said portable object reader and a second 
device external to said first device and connected thereto so that the second 

25 device activates at least one application of the portable object independently of 
said resources. 
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The invention described herein may be used to have access to any application 
provided by a mobile communication handset embedding a smart card (e.g. 
GSM, WCDI\/IA-..) but not exclusively. 

5 In figure 3, a browser in the PC queries a WEB server present in a USB SIM 
card through a USB HUB present in the cellular handset. 

Beyond the cellular handset, the invention is applicable to any portable device 
subject to behave as an intermediate between another portable device it 
embeds - such as a smart card - and another equipment that has access to the 
10 embedded device exactly as if the connection was realized without any 
intermediate. 

More particularlv. the invention comprises the following features : 

1. Implementing a relaying function on a device A in which the smart card is 
15 inserted. 

This function may be realized using different means, depending on the 
communication capabilities of the communicating object. For instance, 
one could use the Internet Protocol, the USB or mixing both on the device 
A. In figure 3, the relaying function is constituted by the USB HUB in the 
20 cellular handset. 

2. This relaying function is used to establish a link between the smart card 
and a device B (here, a PC). In the example of figure 3, the expected 
advantage is using some improved display and entry peripheral 
comparing with the ones existing on the device A. According to the USB 

25 technology, the smart card includes at least one USB device. Here, it 

includes several devices, so that it also includes a corresponding USB 
HUB for giving access to any USB device. Any application of the card, 
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shown on figure 3, may be reached by device B through USB HUB of the 
cellular handset and USB HUB of the card. 

Whatever the technology concerned, device B has access to the card 
through the relaying function and a card reader usually provided in the 
cellular handset. Typically but not exclusively, signals emanating from 
device B are managed by the relaying function, bypassing the known 
resources of the cellular handset (at least mobile communication 
application, keyboard and display). Then, the relaying function sends 
corresponding signals to the card, through the card reader. The same 
path is used for signals emanating from the card and destined to device 
B, that is through the card reader then through the relaying function. 

3. The link between the smart card and the device B is established in a 
such a way that the device B may have no idea that the smart card is in 
reality inserted in a device A that may natively be conceived as a 
peripheral for the device B. 

4. The type of link or protocol used between the smart card and the device 
A, the device A and the device B, or the smart card and the device B has 
no importance, assuming there is no technical impossibility (e.g. speed 
concerns). The protocols and/or the physical means used can be 
different. 

5. Defining a link including the device A, the device B and the smart card is 
the minimum, but several other devices might be inserted in any place of 
the link. 

Some advantages of the invention : 

1 . Having access to the smart card from the device B makes the user more 
comfortable to manage the data in the card (whatever the data are). 
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2. If the device B is equipped with an Internet connection (for example), the 
applications embedded in the smart card could take advantage of this 
connection to upload and /or download data. 

3. Simplifying the access to the card in such a way may help to use the 
5 secure area that is the card. 

4 Implementation example 
4.1 introduction 

This example consists on securely browsing banking accounts from a cellular 
10 handset at any time (i.e. even if the network Is not available), and being also 
able browsing the same data from a PC browser with a better user interface 
(taking advantages of the PC display, keyboard, mouse and more). 

it uses the following : 

o An advanced cellular handset connected to the internet, compatible with 
15 USB smart cards, and embedding the relaying function by including a 

USB HUB. 

• A USB SIM card embedding a WEB server (might be programmed in 
Java for example). 

• A bank WEB server to exchange data with WEB server in the SIM, or to 
20 browse user accounts using a standard WEB browser (e.g. Internet 

Explorer or Netscape-registered trademarks). 

• A PC embedding a USB host (and root HUB) as shown in Tier 1 of figure 
1, a USB plug, etc. 
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4.2 Components characteristics 
4.2.1 Cellular handset characteristics 

The cellular handset shall be immediately connected to the Intemet when, being 
compatible with GPRS or UMTS standards, it recognizes the network. It shall 
5 have an IP address that may change at each startup (a fixed IP address is not 
mandatory). Of course, depending on the network status, the IP link may 
sometimes be broken. 

A standard WEB browser is available on the cellular handset. It may be 
alternatively connected to a server over the wireless connection, or to the server 
10 in the SIM (see §4.2.2). From the browser standpoint there are no differences. 
Every server involved has an IP address. 

The handset and the card are connected using a USB. The SIM, UMTS, GRPS 
or any other applications are viewed as USB devices. 

The handset is directly connected to an external USB host such as a PC. It 
15 becomes a USB HUB (see figure 3). 

From the SIM standpoint, the cellular handset is a USB IHUB that is connected 
to a fiost. 

The handset cannot access the GSM, GPRS and/or some other USB devices as 
it is just behaving as a USB HUB (this is for the example, but technical solutions 
20 can be implemented to allow the handset continuing having access to the 
application that may not interest the USB root to which it is connected). 

4.2.2 SIM card characteristics 

In this example, the SIM card embeds at least the following: 

• The SIM standards requirements to allow the handset to have access to 
25 the cellular network (i.e. the GSM, the GPRS and/or equivalent 

applications). 
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• A WEB server able replying to incoming queries and to exchange files 
with a distant server (using FTP or HTTP protocol for instance). 

• An XML parser. 

• Cryptographic means to manage i<eys, encrypt, decrypt, sign.., 
5 • Preferably, a JavaCard virtual machine. 

• All complementary software and drivers to make all elements listed here 
above to interact. 

The handset has access to the card through a USB. It detects a USB HUB 
followed by several USB devices. 

10 The card embeds a USB HUB and a WEB server. The WEB server virtual 
device (i.e. device driver) Implemented on the handset makes it accessible using 
IP (Internet Protocol). The card becomes an Internet node. Any equipment able 
to have access to this USB, and having the correct device driver, can have 
access to the card WEB server like any other WEB server, thus using an IP 

15 address. 

The IP frames are encapsulated in USB protocol, and the device drivers, both 
on the handset and on the card, provide the interface masking the real data 
transport mean. 

When the USB host detects that the card embeds a USB device that Is a WEB 
20 server, it performs the required operation to allocate it an IP address. 

4.2.3 WEB server characteristics 

The (distant) WEB server is a standard server embedding means to exchange 
files with the SIM card WEB server. 

4.2.4 Complementary cliaracteristics 

'25 The bank server and the card server should share some cryptographic keys in 
order to exchange files and / or queries securely (In order to protect the user 
banking information). The protocol used here is not important as long as the 
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security level is strong enough. There are many standard solutions existing to 
solve this concern. One of them is using the PKl (Public key Infrastructure) 
architecture. 

4.3 Secure off-line banking accounts browsing 

5 Figure 4 shows the architecture of the example, using the components 
described in paragraph 4.2. 

• The handset behavior is the one of a device embedding a USB HUB 
device. 

• The handset Is connected to a USB host. This host shows the USB 
10 HUB in the handset, followed by the one in the smart card, followed by 

the devices in the smart card, particularly the WEB server. 

9 The host has the required virtual devices (i.e. the device driver) at its 
disposal. It Is these virtual devices that encapsulate the IP frame to 
make it compatible with the USB. . 
15 The WEB server device in the smart card Is consequently accessible 

from the host (i.e. the PC) like any other IP node. 

® When the user wants to browse its banking information, it uses the 
browser of its PC (e.g. Netscape or Internet Explorer). He can have 
access to Its banking Information either by accessing the Internet, or 
20 by browsing Its data locally by querying the WEB browser in the smart 

card. 

• When the PC (USB host) is connected to the Internet, the smart card. 
WEB server can take advantage of this situation to synchronize its 
databases with the bank ones. 

25 The link between the handset and the PC does not need to be a USB one. The 
encapsulation process allows using any type of link such as BiueTooth, IP or 
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any other compatible link. The relaying function in the cellular handset will be, in 
each particular case, adapted to the type of link chosen. 

4.4 Alternate solutions 

The entire example described here above is based on the USB protocol. Of 
5 course, many other protocols can also match the requirement. One could 
imagine a smart card and a handset natively embedding the IP. Then, the 
switching operation from the USB root to the USB HUB function is not anymore 
required as the smart card and the handset both become an Intemet node. 

When connected to a PC, ail the three participants are able to have access to 
10 each other with no other restrictions than the one defined by the IP 
specifications. 



